December 2003 - cypherpunks-legacy

ANNOUNCE: Mixmaster 2.0.4 beta available (fwd)
by Fred B. Ringel 17 Dec '03

17 Dec '03

Hi all- No warranties or representations regarding this announcement, however I thought some on the list might find this of interest. I'm putting mine together right now. Fred ---------- Forwarded message ---------- Date: Wed, 4 Jun 1997 03:25:08 +0200 (MET DST) From: Name Withheld by Request <nobody(a)replay.com> Subject: ANNOUNCE: Mixmaster 2.0.4 beta available This is to announce the release of Mixmaster 2.0.4 beta. Mixmaster is a new class of anonymous remailers. Inspired by the existing "cypherpunk" remailers and discussions on the Cypherpunk mailing list, Mixmaster is the next generation in the evolution of remailer technology. Mixmaster is available from: ftp://ftp.replay.com/pub/replay/pub/remailer/Mix-204b1.tar.gz What's new? - several bug fixes. - "middle only" remailer. - messages compression. - support for /dev/random. - rudimentary support for the list of reliable Mixmaster remailers. - new installation script. - can be compiled under DOS/Windows. Mixmaster is (C) by Lance Cottrell <loki(a)infonex.com>. This release was made by Ulf Möller <um(a)idril.shnet.org>.

1 0

DES [Was: Re: Webpage picketing?...]
by Peter Trei 17 Dec '03

17 Dec '03

(maybe) TruthMonger (maybe not) wrote: >[lots of editing] > I used Peter Trei and others' software for the DES Challenge, > but I posted a suggestion to the list that perhaps their programs > contained subterfuge designed to thwart others in their attempts > to find the secret keys. Was I spreading FUD? The responses to > my post gave me much more information about the processes behind > the software than any direct inquiries I had made about their > workings. (And they reinforced the fact that "blind trust" in > their programs or anyone else's is foolish.) > I could put a pointer to Peter's software which opens an > adjoining window which warns that it may be compromised as a > result of ulterior motives. The fact is, however, that Peter > might himself put a disclaimer on his page saying, "If you > can't read code, then you can't be certain of what my software > is doing." (As a matter of fact, I believe his documentation > mentions that there is no guarantee his logic is not in error.) TM: Yes, you were spreading FUD, of a particularly stupid kind. I've always distributed my DES cracking software with full source code, as well as a compilied Wintel version. Anyone who wants to can examine the source and compile it independently if they worry about a mismatch between the source and the included binary. Sven Mikkelsen (http://inet.uni-c.dk/~svolaf/des.htm) has now published full source for BrydDES was well. It runs faster than my code, but is only for x86 (mine includes generic 'C'). If you want to participate in a coordinated attack, and don't mind using a binary-only client, see. http://www.frii.com/~rcv/deschall.htm. This effort claims to have already searched 15% of the keyspace. For overall info on the DES challenge, see http://www.eskimo.com/~joelm/des.html Peter Trei trei(a)process.com

1 0

Cybernetic money laundering
by Tim May 17 Dec '03

17 Dec '03

Hey, we've been saying this for years. It appears the experts now admit we were right. The difference is that what they _worry_ about, we _embrace_. --Tim Wednesday June 4 10:07 AM EDT Internet could help crime syndicates launder money By Richard Waddington LISBON - Big crime syndicates could soon be using the Internet to launder dirty money and there might not be much authorities can do about it, an international conference was told on Tuesday. The international web, which already allows clients to shop and sell around the globe, could become the perfect medium for the cocaine barons of Colombia or the Mafia gangs of Sicily to make their ill-gotten wealth respectable. International police are already having a hard time keeping up with the sophisticated maneuvers of criminals and fraudsters as they switch funds from country to country, often making use of lax banking regulations. But with the Internet and the coming introduction of electronic cash, so-called E-cash, the authorities could lose what has been one of their only advantages -- the need for criminal gangs to handle and at some stage deposit big quantities of cash. ..... E-cash could take the place of physical money in the same way that E-mail has replaced the posting of letters. Huge sums could be switched from person to person without the need to pass through any form of banking system, experts said. .... Backhouse said that experiments with E-cash, or digital banking, were already being carried out in around 25 countries and the system could become commonplace within five years or so. "What is only a little trickle at the moment will become a roaring torrent," he told Reuters. But the ability to switch faceless funds effortlessly around the world was not the only danger posed by the revolution under way in international communications, experts said. Organized crime could use the Internet to set up web-based companies offering services of all types to act as vehicles for "washing" their funds. "The Internet is an ideal medium. It will be difficult to prove that such companies and transactions are false," said Maclachlan. Crime gangs could even go so far as to set up their own banking services as accounts can be established with Internet banks using no more than a photocopy of a driving license as proof of identity, experts said. Global by nature, the network could be particularly difficult to police because of the tricky question of territoriality. Which country has responsibility when a bank can be based only in electronic space? Copyright, Reuters Ltd. All rights reserved

1 0

Re: Hacker Links page (fwd)
by Tim May 17 Dec '03

17 Dec '03

I sent this out last night, leaving the Cypherpunks distribution as "cypherpunks(a)einstein.ssz.com." Alas, it does not seem to have propagated to my site. So here it is: >Date: Tue, 3 Jun 1997 19:09:30 -0700 >To: Jim Choate <ravage(a)einstein.ssz.com>, cypherpunks(a)einstein.ssz.com >(Cypherpunks Distributed Remailer) >From: Tim May <tcmay(a)got.net> >Subject: Re: Hacker Links page (fwd) >Cc: >Bcc: >X-Attachments: > > >When I was on the Cyberial-l list, for lawyers and others interested in >cyberspace law issues, this issues of URLs being infringements came up a >couple of times. > >I think the answer is very clear: nobody needs permission of others to >print URLs. > >URLs are like footnotes. They are not actually links or tunnels of any >sort. They are just like "machine readable footnotes." If I refer a reader >to "Applied Cryptography," either by citing the book title and ISBN numer, >I do not need the permission of Bruce Schnier to cite this information. No >copyright law has ever been held to apply to the recitation of such cites. > >A URL is just an address, much like a ISBN number. > >In modern browsers, clicking on such a URL may be perceived as "taking you >there," and in some sense it does. But what the clicking really does is to >invoke the commands needed to send stuff to the address specified in a URL >and ask that site to send some stuff back. > >Jim and others know this, of course, so I am not lecturing them. Rather, I >am framing the debate in terms that copyright lawyers will surely >understand. > >Now, it may be true that Don Lancaster has decided, for example, that he >doesn't "like" the association of his URL with "hacker" topics. Too bad. > >It would be no different if Lancaster were to object to Timothy McVeigh >providing a reference or footnote to Lancaster's "The TTL Cookbook." Even >if McVeigh were to say he found the "TTL Cookbook" essential for building >bomb timers. (Not that far-fetched, actually.) > >"Fair use" extends to even including chunks of another's writing for >purposes of comment, critique, agreement, discussion, etc. It clearly then >applies to cites of the author's books. > >And more than just "fair use," citing the influence of others and saying >where more information can be found is the essence of free speech. > >(Which means I have the feeling Electronic Frontiers Georgia may be >entering the case on the side of Lancaster!) > >And Lancaster's choice to make his URL publically accessible means that >anyone can click on it. Open and shut. > >--Tim May > > There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

The New War
by John Young 17 Dec '03

17 Dec '03

"The New War" is Senator John Kerry's (Dem, MA) new book which examines global enemies of law and order. He cites the use of high-tech weapons, off-shore banks, and the Internet, featuring encryption, by rogue nations and organized criminals who are hiring the best and brightest lawyers, programmers, cryptographers and ex-spooks who once looked to the USG for secure careers, and who also pay top dollar for premium products and skills once affordable only by the military. He wonders how governments can compete with these new cash-flush criminals. The answer: new laws and new global arrangements. His view on global crypto is almost identical to that of Senator Kerrey (Dem, KA), Professor Denning and others who appear to be working in concert with the administration to advance global GAK, while admitting that some harm to privacy may be necessary. All nations must act in concert, Kerry says, to prevent the spread of dangerous technology. For a similar view, see Denning's synopsis of a paper on criminal use of encryption and developing technology to be published shortly: http://guru.cosc.georgetown.edu/~denning/crypto/oc-abs.html We've also heard from BXA that new regulations for the Commerce Control List and EAR to bring them into accord with the Wassenaar Arrangement will be out in "a month or two." This will probably be coordinated with the issuance of similar regulations by the 33 signators of the regime. It might portend the imposition of a global GAK regime that Kerry, et al, suggest is a primary weapon in The New War.

3 2

Re: Password pirates plunder XXX sites, from The Netly News
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

A huge number of passwords to pay-only porn sites are loose on the Net. Just surf newsgroups like alt.sex.passwords or do a simple search through a typical web engine and long lists of logins are easy to find. There is an easy solution to this problem. Just use one-time passwords. Put it in a cookie. Every time the customer accesses the service you give him a new one. He doesn't have to do anything. If he gives his password away it won't work for him any more. John

2 1

BOUNCE cypherpunks@Algebra.COM: Admin reques
by Igor Chudov ＠ home 17 Dec '03

17 Dec '03

----- Forwarded message from owner-cypherpunks(a)algebra.com ----- >From owner-cypherpunks(a)Algebra.COM Wed Jun 4 16:52:19 1997 From: owner-cypherpunks(a)algebra.com Date: Wed, 4 Jun 1997 17:52:04 -0400 (EDT) Message-Id: <199706042152.RAA01373(a)www.video-collage.com> To: owner-cypherpunks(a)Algebra.COM Subject: BOUNCE cypherpunks(a)Algebra.COM: Admin request of type /\bsub-scribe\b/i at line 7 >From cpunks Wed Jun 4 17:51:59 1997 Received: from sirius.infonex.com (sirius.infonex.com [206.170.114.2]) by www.video-collage.com (8.8.5/8.8.5) with ESMTP id RAA01319 for <cypherpunks(a)algebra.com>; Wed, 4 Jun 1997 17:51:45 -0400 (EDT) Received: (from cpunks@localhost) by sirius.infonex.com (8.8.5/8.7.3) id OAA09047; Wed, 4 Jun 1997 14:51:41 -0700 (PDT) Received: from rigel.cyberpass.net (root(a)rigel.infonex.com [206.170.114.3]) by sirius.infonex.com (8.8.5/8.7.3) with ESMTP id OAA09040 for <cpunks(a)sirius.infonex.com>; Wed, 4 Jun 1997 14:51:36 -0700 (PDT) Received: from toad.com (toad.com [140.174.2.1]) by rigel.cyberpass.net (8.8.5/8.7.3) with ESMTP id OAA13609 for <cypherpunks(a)cyberpass.net>; Wed, 4 Jun 1997 14:50:14 -0700 (PDT) Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3) id OAA25146 for cypherpunks-unedited-outgoing; Wed, 4 Jun 1997 14:43:54 -0700 (PDT) Received: from pathfinder.com (relay2.pathfinder.com [204.71.242.22]) by toad.com (8.7.5/8.7.3) with ESMTP id OAA25141 for <cypherpunks(a)toad.com>; Wed, 4 Jun 1997 14:43:50 -0700 (PDT) Received: from cp.pathfinder.com by pathfinder.com (8.7.3/SMI-SVR4) id RAA15204; Wed, 4 Jun 1997 17:43:19 -0400 (EDT) Received: from localhost by cp.pathfinder.com (SMI-8.6) id RAA03951; Wed, 4 Jun 1997 17:43:13 -0400 Date: Wed, 4 Jun 1997 17:42:33 -0400 (EDT) From: Declan McCullagh <declan(a)pathfinder.com> Reply-To: declan(a)well.com To: cypherpunks(a)toad.com Subject: Anonymity should be banned for speakers and vendors Message-ID: <Pine.GSO.3.95.970604174023.29555R-100000(a)cp.pathfinder.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cypherpunks(a)toad.com Precedence: bulk [Ray, a recent DC law school grad and anti-spam activist, is a good guy but is IMHO sadly mistaken here. Thought this might be interesting. --Declan] ---------- Forwarded message ---------- X-FC-URL: Fight-Censorship is at http://www.eff.org/~declan/fc/ X-FC-URL: To join send "sub-scribe" to fight-censorship-request(a)vorlon.mit.edu Date: Wed, 4 Jun 97 17:25:36 -0400 From: Ray Everett-Church <ray(a)everett.org> Sender: owner-fight-censorship(a)vorlon.mit.edu To: sameer <sameer(a)c2.net>, tbetz(a)pobox.com Cc: fight-censorship(a)vorlon.mit.edu Subject: Re: Spam costs and questions On 6/4/97 4:52 PM, sameer (sameer(a)c2.net) wrote: >> If Wallace were up against criminal and civil penalties if he continued to >> hide his customers' real identities, he'd give them up in a hot second. Of >> course, as soon as there was a chance of that happening, he'd get out of the >> business entirely. > > So how do criminal and civial penalties for not revealing a >customer's name protect anonymity on the internet? > Anonymity on the internet must be preserved. If you could come >up with a way to make spam illegal and preserve anonymity, I would be >very glad. Until then, I will have to oppose making spam illegal. As stated before, I have heard no convincing argument that it is in the consumers best interest to have an anonymous *vendor*. Sure it's vital that *consumers* be allowed to remain anonymous, but if you're selling a product or service, there's no legitimate reason why a business needs to remain anonymous given issues of warranties, product liability, sales taxes, etc. And in the case above, since the remailer in question is simply acting as an agent for the business, there's no question of legitimate anonymity implicated. Indeed, perpetuating anonymity for the business often times facilitates activites that constitute a breach of contract and sometimes even fraud. The whole reason to use a pro-spam anon remailer is so that you can violate your ISP usage agreement without being traceable or accountable. And if you've entered into that contractual relationship with the ISP with the *intent* to breach that contract, it's fraud. Anonymity for consumers, Yes! Anonymity for vendors, NO! -Ray <everett(a)cauce.org> ------------------------------------------------------------------------- Ray Everett-Church, Esq. <ray(a)everett.org> www.everett.org/~everett This mail isn't legal advice. Opinion(RE-C) != Opinion(clients(RE-C)) (C)1997 Ray Everett-Church ** Help outlaw "spam"=> http://www.cauce.org ------------------------------------------------------------------------- ----- End of forwarded message from owner-cypherpunks(a)algebra.com -----

3 2

Password pirates plunder XXX sites, from The Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

[We include links to sites with porn passwords in today's story, BTW. --Declan] ******* http://cgi.pathfinder.com/netly/opinion/0,1042,1015,00.html The Netly News Network (http://netlynews.com/) June 4, 1997 Porn Free by Chris Stamper and Greg Lindsay (thenetlynews(a)pathfinder.com) Sexfilms.com used to be a small, members-only adult site that shipped full-frame videos over a super-fast T-3 line. Traffic on the site was comfortably low for about a year, owner Ray Alba says, until one name -- "Joe Camaro" -- started appearing with some frequency. Actually, it started appearing 500 times a minute. From Sweden, Japan, Hong Kong, Singapore -- just about anywhere. Somebody was passing out the password. Download speeds faltered, from 300K/sec to 6K/sec. And then the servers themselves began to crash. Finally, Alba had to shut down the site for several weeks to clear out Camaro and numerous other accounts that had leaked out to the Net. Alba was the latest victim of... Porn Piratz! A huge number of passwords to pay-only porn sites are loose on the Net. Just surf newsgroups like alt.sex.passwords or do a simple search through a typical web engine and long lists of logins are easy to find. Some of these logins are giveaways from people who ponied up the low, one-time-only flat fees that many sites charge. Others, apparently, were obtained with phony credit card numbers. Who knows how Porn Piratz get the rest. But they do: A Hustler executive told us that Hustler's sites have seven times its paid membership logging on every day. [...]

1 0

G-10 on Electronic Money
by John Young 17 Dec '03

17 Dec '03

We offer the April 1997 report of the G-10 countries* "Electronic Money." http://jya.com/g10emoney.htm (121K) This is a survey of the electronic payments systems of the ten countries, and the status and prospects in each for policy, law enforcement, privacy and related issues. The report is by a Working Party set up after the Lyon conference in June 1996 to examine three policy areas: (1) consumer issues; (2) law enforcement issues; and (3) supervisory issues It was presented at a G-10 conference in DC on April 28 and publically released in the US on May 7 by the Treasury Department. * Belgium, Canada, France, Germany, Italy, Japan, Netherlands, Sweden, Switzerland, United Kingdom and the United States.

1 0

RE: McVeigh? Nimrods.....
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- <sigh> If you don't want your children to get blown up don't put them in harms way. The government *KNEW* that this building was the target of numerious groups. They especially knew that it was a major risk on that day. They did nothing to warn the occupants of the building. This is no different than palcing a daycare center in a munition factory durring a time of war and then blaming the bomber pilots for blowing up children. The Judge of the McVeigh case said himself in his instructions to the jury that there was no evidence that McVeigh knew of the day care center in the building. McVeigh was going after the ATF agents in the building (all of which were conviently gone at the time of the bombing). A just where were your tears for the children that were burned alive by the ATF in Waco or the children of Weaver guned down by sinpers at Ruby Ridge? I guess it only ok to kill children if it's the Federal Government doing it. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM5W3749Co1n+aLhhAQEsWQP/R2nbcaI5ZgcLJRrjfoXTcDOJ8mFDzVv1 BzDomMwafGWQw9NDAyFg1M7B31899OF0LnVrP4ezg5cRLOMUpjP7lBlKkxduBvUi yy/37h8czmepT3ejTAvLwdFWR1uIx3B8A2t79b52XwcO2WHSpRHLruK0oAUOGWMK Bfe2uIKzVOE= =WigK -----END PGP SIGNATURE-----

2 1